//
// Generated from signsrch signature database
// http://aluigi.altervista.org/mytoolz.htm
// https://www.decalage.info/en/signsrch2yara
//

rule compression_algorithm_seen_in_the_game_DreamKiller__32_big_AND_
{
	strings:
		$a0 = { ffffff1f[0-20]ffffff3f[0-20]ffffff0f }
	condition:
		$a0
}
rule libmng_interlace_const__32_big_AND_
{
	strings:
		$a0 = { 00000000[0-20]00000000[0-20]00000004[0-20]00000000[0-20]00000002[0-20]00000000[0-20]00000001[0-20]00000008[0-20]00000008[0-20]00000008[0-20]00000004[0-20]00000004[0-20]00000002[0-20]00000002[0-20]00000000[0-20]00000004[0-20]00000000[0-20]00000002[0-20]00000000[0-20]00000001[0-20]00000000[0-20]00000008[0-20]00000008[0-20]00000004[0-20]00000004[0-20]00000002[0-20]00000002[0-20]00000001[0-20]00000007[0-20]00000007[0-20]00000003[0-20]00000003[0-20]00000001[0-20]00000001[0-20]00000000[0-20]00000003[0-20]00000003[0-20]00000002[0-20]00000002[0-20]00000001[0-20]00000001[0-20]00000000 }
	condition:
		$a0
}
rule SSL3__define__32_big_AND_
{
	strings:
		$a0 = { 03000001[0-20]03000002[0-20]03000003[0-20]03000004[0-20]03000005[0-20]03000006[0-20]03000007[0-20]03000008[0-20]03000009[0-20]0300000a[0-20]0300000b[0-20]0300000c[0-20]0300000d[0-20]0300000e[0-20]0300000f[0-20]03000010[0-20]03000011[0-20]03000012[0-20]03000013[0-20]03000014[0-20]03000015[0-20]03000016[0-20]03000017[0-20]03000018[0-20]03000019[0-20]0300001a[0-20]0300001b[0-20]0300001c[0-20]0300001d[0-20]0300001e[0-20]0300001e[0-20]0300001f[0-20]03000020[0-20]03000021[0-20]03000022[0-20]03000023[0-20]03000024[0-20]03000025[0-20]03000026[0-20]03000027[0-20]03000028[0-20]03000029[0-20]0300002a[0-20]0300002b }
	condition:
		$a0
}
